Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
File:                     _byekQMWvi8EM6qVOSzWc53Ca4Y.mft (raw, json)
Hash identifier:          gRpPsXon2myEznhD095OtxOLWoSLn4Jlv72+rsTu/SA=
Subject key identifier:   4B:21:B5:EC:D0:A2:DA:D2:E4:66:E3:CF:5C:43:E5:2E:74:28:B2:C8
Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
Certificate issuer:       /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Certificate serial:       0198820B5F35F9866F3F3202D54B94FBA20D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
Manifest number:          161F
Signing time:             Thu 07 Aug 2025 01:00:39 +0000
Manifest this update:     Thu 07 Aug 2025 01:00:39 +0000
Manifest next update:     Fri 08 Aug 2025 01:00:39 +0000
Files and hashes:         1: _byekQMWvi8EM6qVOSzWc53Ca4Y.crl (hash: 6pvwpF9tnPmIz4jD+aByN09yFYPFcOJVsiIRa2DSbSE=)
                          2: yxRSGJfki1mfuRlitSEOgfKdMqI.roa (hash: T4WCtISFCRzOuyE0OUo1rNu8VMdZMXWp/avFZYHhGtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0b:5f:35:f9:86:6f:3f:32:02:d5:4b:94:fb:a2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
        Validity
            Not Before: Aug  7 01:00:39 2025 GMT
            Not After : Aug  8 01:00:39 2025 GMT
        Subject: CN=4b21b5ecd0a2dad2e466e3cf5c43e52e7428b2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:84:d6:21:cf:be:94:54:c7:97:61:32:d7:
                    20:14:81:01:a6:8c:0d:64:12:98:8b:86:b0:95:11:
                    be:1c:cf:8f:a4:4b:6c:e0:84:a4:78:74:82:50:2c:
                    df:91:84:15:71:13:ee:b4:61:5d:e4:4a:21:57:ec:
                    1a:8f:55:ac:d0:ff:af:d4:88:2f:85:19:e2:c3:eb:
                    98:23:e3:96:69:55:4e:25:f7:b6:45:3f:cb:cf:cd:
                    9f:0c:30:8e:04:e0:58:58:89:20:5d:84:6a:11:00:
                    00:9e:8e:81:6f:0b:c8:ae:e6:7f:13:90:6e:49:40:
                    34:fe:5d:56:9d:d3:7b:01:01:e7:38:08:dd:19:57:
                    90:90:7a:fe:e8:d6:49:ba:ce:22:8a:72:84:44:e9:
                    b4:3e:ca:85:51:2e:29:7c:a6:0c:a8:6f:97:5e:ed:
                    59:9e:30:c4:2d:82:4a:29:d8:76:57:ba:18:a4:34:
                    85:0b:4c:c9:72:60:a1:c9:d4:20:38:87:cd:c4:32:
                    bb:22:b4:3b:d7:d3:34:30:59:48:94:fa:a2:e1:86:
                    c5:ce:da:2e:9e:e0:7d:0b:56:d2:a6:bf:ae:da:a5:
                    78:86:40:45:2c:f8:1c:50:f5:3a:19:34:26:5a:b0:
                    c2:6e:7a:0f:27:df:fd:62:93:18:aa:27:94:c1:c4:
                    2f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:21:B5:EC:D0:A2:DA:D2:E4:66:E3:CF:5C:43:E5:2E:74:28:B2:C8
            X509v3 Authority Key Identifier:
                keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:44:0d:cc:a7:d6:9f:1c:5f:55:ce:27:9f:a4:36:6c:b6:7e:
         ec:d6:40:43:7c:29:b6:6a:6a:d9:c3:55:26:75:01:c4:18:a9:
         6d:d8:33:06:9f:67:95:11:7b:9e:54:2a:ee:65:be:70:f8:85:
         5d:2c:eb:3b:51:fc:c6:b7:0f:47:a4:4e:1b:17:22:fd:28:4b:
         6e:5c:2e:4c:bc:3c:0e:56:7c:02:d5:a8:10:a4:f5:28:06:94:
         c8:ed:5a:e6:ab:7f:02:02:8b:bf:04:6e:12:3d:e3:c0:0e:f4:
         08:27:f6:8a:4f:7c:57:11:70:7c:67:03:1c:92:70:13:c0:2b:
         dd:8d:85:1b:87:d8:98:30:f7:75:f8:e4:7d:53:39:93:d2:40:
         cd:32:a9:3f:c5:43:ca:d9:61:b2:62:75:fb:72:57:81:22:7e:
         7c:8e:19:aa:44:e8:b6:e3:1c:3b:ad:4c:aa:51:01:df:72:66:
         8d:ad:cc:96:41:52:a2:75:0c:1a:e1:d0:9c:92:dd:e4:71:73:
         e2:23:8f:59:c6:9f:c3:d7:be:4f:5c:59:13:b7:5c:80:ed:df:
         fa:20:40:57:24:4e:5a:79:d0:62:4f:1e:1a:03:eb:cd:8e:c6:
         58:ee:78:cf:b0:1b:94:04:e4:d7:50:7b:b6:b8:95:ea:64:5a:
         4e:98:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:02:21 2025 by rpki-client